Нармафзори нозири бесими LAN
Маълумот оид ба маҳсулот
Efficient Image Upgrade
Мушаххасоти
- Feature: Efficient Image Upgrade
- Compatibility: Not recommended for controllers running Cisco
IOS XE Amsterdam 17.3.x with Cisco Catalyst 9124AX and Cisco
Catalyst 9130AX APs in the same group.
Дастурҳои истифодаи маҳсулот
Enable Pre-Download (GUI)
- Go to Configuration > Wireless > Access Points.
- In the Access Points page, expand the All Access Points section
and click the name of the AP to edit. - In the Edit AP page, click the Advanced tab.
- Under the AP Image Management section, click Predownload.
- Click Update & Apply to Device to enable Pre-Download.
Enable Pre-Download (CLI)
- Бо истифода аз фармон ба ҳолати конфигуратсияи глобалӣ ворид шавед:
configure terminal. - Create a wireless profile flex by entering:
wireless.
profile flex flex-profile - Enable predownload of the image by using:
predownload. - Exit configuration mode by entering:
end.
Configuring a Site Tag (CLI)
- Access global configuration mode with:
configure.
terminal - Сайт эҷод кунед tag by using:
wireless tag site.
site-name - Configure a flex profile by entering:
flex-profile.
flex-profile-name - Add a description for the site tag бо:
description.
site-tag-name - Save and exit configuration mode by using:
end.
Саволҳои зиёд такрормешуда
Q: Can I use Efficient Image Upgrade feature on all controller
намуд?
A: No, it is not recommended to enable this feature on
controllers running Cisco IOS XE Amsterdam 17.3.x when there are
Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same
гурӯҳ.
Q: How can I attach a policy tag and a site tag to an AP?
A: Follow the procedure given in the user manual under
“Attaching Policy Tag ва Сайт Tag to an AP (CLI)”.
Efficient Image Upgrade
· Efficient Image Upgrade, on page 1 · Enable Pre-Download (GUI), on page 2 · Enable Pre-Download (CLI), on page 2 · Configuring a Site Tag (CLI), on page 2 · Attaching Policy Tag ва Сайт Tag to an AP (CLI), on page 4 · Trigger Predownload to a Site Tag, on page 5 · Feature History for Out-of-Band AP Image Download, on page 7 · Information About Out-of-Band AP Image Download, on page 7 · Restrictions for Out-of-Band AP Image Download, on page 8 · Download AP Image from Controller Using HTTPS (CLI), on page 8 · Download AP Image from Controller Using HTTPS (GUI), on page 9 · Verifying Image Upgrade, on page 10
Efficient Image Upgrade
Efficient Image upgrade is an efficient way of predownloading the image to the APs. It works similar to primary – subordinate model. An AP per model becomes the primary AP and downloads image from the controller through the WAN link. Once the primary AP has the downloaded image, the subordinate APs starts downloading the image from the primary AP. In this way, WAN latency is reduced. Primary AP selection is dynamic and random. A maximum of three subordinate APs per AP model can download the image from the primary AP.
Note Do not enable this feature on controllers running Cisco IOS XE Amsterdam 17.3.x when there are Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.
Efficient Image Upgrade 1
Enable Pre-Download (GUI)
Efficient Image Upgrade
Enable Pre-Download (GUI)
Тартиб
Қадами 1 Қадами 2 Қадами 3
Қадами 4
Choose Configuration > Wireless > Access Points. In the Access Points page, expand the All Access Points section and click the name of the AP to edit. In the Edit AP page, click the Advanced tab and from the AP Image Management section, click Predownload. Click Update & Apply to Device.
Enable Pre-Download (CLI)
Тартиб
Қадами 1
Фармон ё Амали конфигуратсияи терминали Exampле:
Дастгоҳ # конфигуратсияи терминал
Ҳадаф Ба ҳолати конфигуратсияи глобалӣ ворид мешавад.
Қадами 2
бесим проfile flex flex-profile
Exampле:
Дастгоҳ (конфигуратсия) # профессионали бесимfile flex rr-xyz-flex-profile
Configures a flex profile and enters the flex profile ҳолати танзимот.
Қадами 3
predownload
Exampле:
Дастгоҳ (config-wireless-flex-profile)# predownload
Enables predownload of the image.
Қадами 4
Поён
Exampле:
Дастгоҳ (config-wireless-flex-profile)# Поён
Exits the configuration mode and returns to privileged EXEC mode.
Configuring a Site Tag (CLI)
Follow the procedure given below to configure a site tag:
Efficient Image Upgrade 2
Efficient Image Upgrade
Configuring a Site Tag (CLI)
Тартиб
Қадами 1
Фармон ё Амали конфигуратсияи терминали Exampле:
Дастгоҳ # конфигуратсияи терминал
Ҳадаф Ба ҳолати конфигуратсияи глобалӣ дохил мешавад.
Қадами 2
бесим tag site site-name
Exampле:
Device(config)# wireless tag site rr-xyz-site
Configures a site tag and enters site tag ҳолати танзимот.
Қадами 3
flex-profile flex-profile-ном
Exampле:
Device(config-site-tag)# flex-profile rr-xyz-flex-profile
Configures a flex profile.
Шарҳ
You cannot remove the flex
проfile configuration from a site
tag if local site is configured on
сайт tag.
Шарҳ
The no local-site command needs
to be used to configure the Site
Tag as Flexconnect, otherwise the
Flex profile config does not take
таъсир.
Қадами 4 Қадами 5 Қадами 6
description site-tag-ном
Exampле:
Device(config-site-tag)# description “default site tag”
Adds a description for the site tag.
охири Мисampле:
Device(config-site-tag)# Поён
Saves the configuration and exits configuration mode and returns to privileged EXEC mode.
show wireless tag site summary
(Optional) Displays the number of site tags.
Exampле:
Шарҳ
Device# show wireless tag site summary
Ба view detailed information about a site, use the show wireless tag site detailed site-tag-name command.
Шарҳ
The output of the show wireless
loadbalance tag affinity wncd
wncd-instance-number command
displays default tag (site-tag) type,
if both site tag and policy tag мебошанд
танзим нашудааст.
Efficient Image Upgrade 3
Attaching Policy Tag ва Сайт Tag to an AP (CLI)
Efficient Image Upgrade
Attaching Policy Tag ва Сайт Tag to an AP (CLI)
Follow the procedure given below to attach a policy tag and a site tag to an AP:
Тартиб
Қадами 1
Фармон ё Амали конфигуратсияи терминали Exampле:
Дастгоҳ # конфигуратсияи терминал
Қадами 2
ap mac-address Exampле:
Device(config)# ap F866.F267.7DFB
Ҳадаф Ба ҳолати конфигуратсияи глобалӣ дохил мешавад.
Configures a Cisco AP and enters AP profile ҳолати танзимот.
Шарҳ
The mac-address should be a
wired mac address.
Қадами 3 Қадами 4 Қадами 5 Қадами 6 Қадами 7 Қадами 8 Қадами 9
policy-tag policy-tag-ном
Exampле:
Device(config-ap-tag)# policy-tag rr-xyz-policy-tag
Maps a policy tag ба АП.
сайт-tag сайт-tag-ном
Exampле:
Device(config-ap-tag)# site-tag rr-xyz-site
Maps a site tag ба АП.
rf-tag rf-tag- номи Exampле:
Device(config-ap-tag)# rf-tag rf-tag1
Associates the RF tag.
охири Мисampле:
Device(config-ap-tag)# Поён
Saves the configuration, exits configuration mode, and returns to privileged EXEC mode.
show ap tag summary Exampле:
Device# show ap tag хулоса
(Optional) Displays AP details and the tags associated to it.
show ap name <ap-name> tag маълумот
Exampле:
Device# show ap name ap-name tag маълумот
(Optional) Displays the AP name with tag маълумот.
show ap name <ap-name> tag detail Exampле:
(Optional) Displays the AP name with tag detals.
Efficient Image Upgrade 4
Efficient Image Upgrade
Trigger Predownload to a Site Tag
Фармон ё амал
Мақсад
Device# show ap name ap-name tag тафсилот
Trigger Predownload to a Site Tag
Follow the procedure given below to trigger image download to the APs:
Тартиб
Қадами 1
Фармон ё Амалиётро фаъол созед Exampле:
Device> configure terminal
Purpose Enters the privileged EXEC mode.
Қадами 2
ap image predownload site-tag сайт-tag start Instructs the primary APs to start image
Exampле:
predownload.
Device# ap image predownload site-tag rr-xyz-site start
Қадами 3
show ap master list Exampле:
Device# show ap master list
Displays the list of primary APs per AP model per site tag.
Қадами 4
show ap image Exampле:
Device# show ap image
Displays the predownloading state of primary and subordinate APs .
Шарҳ
To check if Flexefficient image
upgrade is enabled in the AP, use
the show capwap client rcb
command on the AP console.
Сample outputs display the functioning of the Efficient Image Upgrade feature:
The following output displays the primary AP.
Device# show ap master list
Номи AP
WTP Mac
Модели AP
Сайт Tag
—————————————————————————————–
AP0896.AD9D.3124
f80b.cb20.2460 AIR-AP2802I-D-K9 ST1
The following output shows that the primary AP has started predownloading the image.
Device# show ap image Total number of APs: 6
Номи AP
Primary Image Backup Image Predownload Status Predownload Version
Next Retry Time Retry Count
————————————————————————————————————————–
APE00E.DA99.687A 16.6.230.37
0.0.0.0
Ҳеҷ
0.0.0.0
Efficient Image Upgrade 5
Trigger Predownload to a Site Tag
Efficient Image Upgrade
N/A AP188B.4500.4208
N/A AP188B.4500.4480
N/A AP188B.4500.5E28
N/A AP0896.AD9D.3124
0 AP2C33.1185.C4D0
Н/А
0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0 XNUMX XNUMX XNUMX
8.4.100.0
Ҳеҷ
0.0.0.0
Ҳеҷ
16.4.230.35 Ҳеҷ
8.4.100.0
Predownloading
8.4.100.0
Ҳеҷ
0.0.0.0 0.0.0.0 0.0.0.0 16.6.230.36 0.0.0.0
The following output shows that the primary AP has completed predownload and the predownload has been initiated in the subordinate AP.
Device# show ap image
Шумораи умумии АП: 6
Номи AP
Primary Image Backup Image Predownload Status Predownload Version
Next Retry Time Retry Count
————————————————————————————————————————–
APE00E.DA99.687A 16.6.230.37
0.0.0.0
Ташаббускор
16.6.230.36
Н/А
0
AP188B.4500.4208 16.6.230.37
8.4.100.0
Ҳеҷ
0.0.0.0
Н/А
0
AP188B.4500.4480 16.6.230.37
0.0.0.0
Ҳеҷ
0.0.0.0
Н/А
0
AP188B.4500.5E28 16.6.230.37
16.4.230.35 Ҳеҷ
0.0.0.0
Н/А
0
AP0896.AD9D.3124 16.6.230.37
8.4.100.0
Анҷом
16.6.230.36
0
0
AP2C33.1185.C4D0 16.6.230.37
8.4.100.0
Ташаббускор
16.6.230.36
0
0
The following output shows image status of a particular AP.
Device# show ap name APe4aa.5dd1.99b0 image AP Name : APe4aa.5dd1.99b0 Primary Image : 16.6.230.46 Backup Image : 3.0.51.0 Predownload Status : None Predownload Version : 000.000.000.000 Next Retry Time : N/A Retry Count : 0
The following output shows predownload completion on all APs.
Device# show ap image Total number of APs: 6
Number of APs
Ташаббускор
:0
Predownloading
:0
Completed predownloading : 3
Дастгир карда намешавад
:0
Failed to Predownload
:0
Номи AP
Primary Image Backup Image Predownload Status Predownload Version
Next Retry Time Retry Count
————————————————————————————————————————–
APE00E.DA99.687A 16.6.230.37
16.6.230.36 Анҷом
16.6.230.36
Н/А
0
Efficient Image Upgrade 6
Efficient Image Upgrade
Feature History for Out-of-Band AP Image Download
AP188B.4500.4208 N/A
AP188B.4500.4480 N/A
AP188B.4500.5E28 N/A
AP0896.AD9D.3124 0
AP2C33.1185.C4D0 0
16.6.230.37 0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0
8.4.100.0
Ҳеҷ
0.0.0.0
Ҳеҷ
16.4.230.35 Ҳеҷ
16.6.230.36 Анҷом
16.6.230.36 Анҷом
0.0.0.0 0.0.0.0 0.0.0.0 16.6.230.36 16.6.230.36
Feature History for Out-of-Band AP Image Download
This table provides release and related information for the feature explained in this module. This feature is available in all the releases subsequent to the one in which it is introduced in, unless noted otherwise.
Table 1: Feature History for Out-of-Band AP Image Download
Озод кардан
Cisco IOS XE Dublin 17.11.1
Хусусият
Out-of-Band AP Image Download
Маълумоти хусусият
The AP image upgrade method is enhanced to make the upgrades faster and more flexible.
Information About Out-of-Band AP Image Download
In WLAN deployments, the APs gather their software image and configuration from the controller (in-band) during the join, predownload, and upgrade phases over the CAPWAP control path. This mechanism has limitations in the context of CAPWAP window size, processing of CAPWAP packets, and parallel image downloads. With image upgrade being a significant activity in the lifecycle of APs, upgrades become a time-consuming activity when the deployment size increases, especially for remote deployments, because the image always comes from the controller, irrespective of the deployment types.
To make upgrades faster and more flexible, the AP image upgrade method is enhanced in Cisco IOS XE Dublin 17.11.1 release. An enhanced webserver (nginx) running on the controller helps the AP image downloads to be available out of the CAPWAP path (out of band).
Шарҳ
· HTTPS configuration done at the global level applies to all the APs joining the controller.
· When AP image download over an Out-of-Band method fails, the download falls back to the CAPWAP method, as a result of which the APs will not be stranded.
· AP image download over HTTPS may fail if the HTTPS server Trustpoint has a chain of CA certificates.
· Before you downgrade from Cisco IOS XE Dublin 17.11.1 to an earlier version, ensure that the Out-of-Band AP Image Download feature is disabled, as it is not supported in previous releases.
Efficient Image Upgrade 7
Restrictions for Out-of-Band AP Image Download
Efficient Image Upgrade
Restrictions for Out-of-Band AP Image Download
This feature is not supported on the following platforms: · Cisco Embedded Wireless Controller on Catalyst Access Points · Cisco Embedded Wireless Controller on Catalyst Switches · Cisco Wave 1 Access Points
Download AP Image from Controller Using HTTPS (CLI)
Before you begin · HTTPS configuration must be enabled.
· The ngnix server must be running on the controller. Use the show platform software yang-management process command to check whether the ngnix server is running.
· The custom-configured port must be reachable between the controller and the corresponding AP.
Тартиб
Қадами 1
Фармон ё Амали конфигуратсияи терминали Exampле:
Дастгоҳ # конфигуратсияи терминал
Ҳадаф Ба ҳолати конфигуратсияи глобалӣ ворид мешавад.
Қадами 2
ap upgrade method https
Configures the corresponding AP to download
Exampле:
the image over HTTPS from the controller if the AP supports out-of-band AP image
Device(config)# ap upgrade method https download method.
You can check whether the AP supports efficient download method using the show ap config general command.
Use the no form of this command to disable out-of-band AP image download method.
Қадами 3
ap file-transfer https port port_number
Exampле:
Device(config)# ap file-transfer https port 8445
Configures a custom port for image download from the nginx server running on the controller.
For HTTPS port, the valid values range from 0 to 65535, with a default of 8443. You cannot use port 443 for AP file transfers because it is the default port used for other HTTPS requests. Also, avoid configuring standard and well-known ports because the configuration may fail.
Efficient Image Upgrade 8
Efficient Image Upgrade
Download AP Image from Controller Using HTTPS (GUI)
Фармон ё амал
Қадами 4
охири Мисampле:
Дастгоҳ (конфигуратсия) # охири
Мақсад
By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file transfer over HTTPS instead of 8443.
The port 8443 is customazible. A sample config is given below:
Source= wireless controller Destination= Access Point Protocol=HTTPS Destination Port=8443 Source Port=any Description= “Out of Band AP Image Download”
Ба ҳолати имтиёзноки EXEC бармегардад.
Download AP Image from Controller Using HTTPS (GUI)
Тартиб
Қадами 1 Қадами 2
Қадами 3
Қадами 4
Choose Configuration > Wireless > Wireless Global.
In the AP Image Upgrade section, enable the HTTPS Method to allow image download on APs from the controller, over HTTPS. This out-of-band file transfer is an efficient method for AP image upgrade.
Шарҳ
The AP should support out-of-band image download. You can verify this in the Configuration
> Wireless > Access Points window. Select the AP, and in the Edit AP > Advanced tab, view
the details of the support in the AP Image Management section.
Enter the HTTPS Port to designate AP file transfers on that port. Valid values range from 0 to 65535, with the default being 8443. Note that you cannot use port 443 for AP file transfers because that is the default port for other HTTPS requests.
By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file transfer over HTTPS instead of 8443.
Click Apply to Device to save the configuration.
Efficient Image Upgrade 9
Verifying Image Upgrade
Efficient Image Upgrade
Verifying Image Upgrade
To check whether an AP supports efficient download method, use the following command:
Device# show ap config general
Cisco AP Name : AP002C.C862.E880 =================================================
Cisco AP Identifier : 002c.c88b.0300 Country Code : Multiple Countries : IN,US Regulatory Domain Allowed by Country : 802.11bg:-A 802.11a:-ABDN AP Country Code : US – United States AP Regulatory Domain 802.11bg : -A AP Upgrade Out-Of-Band Capability : Enabled AP statistics : Disabled
Ба view the AP image download statistics, use the following command. Use the show ap image command to see the detailed output.
Device# show ap image summary
Total number of APs : 1 Number of APs
Initiated Downloading Predownloading Completed downloading Completed predownloading Not Supported Failed to Predownload Predownload in progress
:0 :0 :0 :0 :0 :0 :0 : No
Ба view the method used to download the AP image, use the following command:
Device# show wireless stats ap image-download
AP image download info for last attempt
AP Name Count ImageSize StartTime
Вақти хотимавӣ
Diff(secs) Predownload Aborted
Усул
——————————————————————————————————
mysore1 1
40509440 08/23/21 22:17:59 08/23/21 22:19:06 67
Не
Не
CAPWAP
Ба view the method used to download the AP image, use the following command:
Device# show ap upgrade method AP upgrade method HTTPS : Disabled
Ба view the port used for the AP image transfer, use the following command:
Device# show ap file- хулосаи интиқоли https
Configured port Operational port
: 8443 : 8443
Efficient Image Upgrade 10
Efficient Image Upgrade
Verifying Image Upgrade
!If different ports are shown under ‘Configured port’ and ‘Operations port’ !that means custom port configuration has failed and is continuing with the previous port.
!The failure reason could be the input port, which is a well-known port and already in use.
Ба view the whether an AP supports image download over HTTPS, use the following command:
Device# show ap name AP2800 config general | sec Upgrade
AP Upgrade Out-Of-Band Capability
: Фаъол
Ба view the detailed output an AP’s pre-image, use the following command:
Device# show ap image
Total number of APs : 2
Number of APs
Ташаббускор
:0
Зеркашӣ кардан
:0
Predownloading
:0
Completed downloading
:2
Completed predownloading : 0
Дастгир карда намешавад
:0
Failed to Predownload
:0
Predownload in progress : No
AP Name Primary Image Backup Image Predownload Status Predownload Version Next Retry
Time Retry Count Method
——————————————————————————————————————–
AP_3800_1 17.11.0.69 17.11.0.71 None
0.0.0.0
Н/А
0
HTTPS
AP2800
17.11.0.69 17.11.0.71 Не
0.0.0.0
Н/А
0
HTTPS
!The ‘method’ column indicates the download method used by the AP.
Efficient Image Upgrade 11
Verifying Image Upgrade
Efficient Image Upgrade
Efficient Image Upgrade 12
Ҳуҷҷатҳо / Сарчашмаҳо
 |
CISCO Wireless LAN Controller Software [pdf] Дастури корбар Wireless LAN Controller Software, LAN Controller Software, Controller Software, Software |